Approaching Cyclone: Vortex Werewolf Attacks Russia
Essential information
- Published
- 29/01/2026 07:39
- Modified
- 29/01/2026 08:04
- Tags
- 2026-01-29 cyclone fake pages file downloads phishing russia telegram
- Related entities
- 44 observables, 1 intrusion sets (apt), 19 others
Description
A new cluster is spreading malware through phishing attacks targeting Russia. The attack methodology involves fake pages that imitate file downloads from Telegram. The article likely details the structure of these attacks, providing insights into how the malicious actors are exploiting user trust in the popular messaging platform to deliver their payload. This emerging threat, dubbed Vortex Werewolf, appears to be a sophisticated campaign specifically targeting Russian users or entities.